Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/urBoXkc7lnS8EQwFyaeh8RvZUYQ.roa
File: urBoXkc7lnS8EQwFyaeh8RvZUYQ.roa (raw, json)
Hash identifier: zIb+Rv4/bn4WY7md7g9951zrdS4+gGKgBXuNKbRc70s=
Subject key identifier: BA:B0:68:5E:47:3B:96:74:BC:11:0C:05:C9:A7:A1:F1:1B:D9:51:84
Certificate issuer: /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial: 02E265A3
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/urBoXkc7lnS8EQwFyaeh8RvZUYQ.roa
Signing time: Sat 01 Jan 2022 02:58:04 +0000
ROA not before: Sat 01 Jan 2022 02:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62456
IP address blocks: 93.180.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48391587 (0x2e265a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Validity
Not Before: Jan 1 02:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bab0685e473b9674bc110c05c9a7a1f11bd95184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:90:82:7f:80:85:0e:64:13:cf:de:10:75:
ea:2d:bc:83:00:83:79:d7:86:a1:30:24:56:d3:3d:
8c:c7:74:66:62:5f:10:a7:be:a6:63:ee:26:5f:ba:
9e:7f:e4:57:66:fd:15:d0:64:c3:9a:d2:f0:4c:8c:
b9:83:c0:94:5a:c9:f2:3c:34:cb:73:5d:14:cc:75:
7c:01:c9:f0:6f:32:de:b5:5c:0b:59:0c:17:33:d1:
65:a4:ea:88:85:e7:f3:02:1e:86:aa:61:31:65:15:
e3:55:01:2d:22:f5:42:69:86:b3:17:21:48:24:8d:
b3:7b:41:dd:1c:3a:70:9f:66:64:13:8c:be:17:13:
a8:6d:ba:17:84:cc:f6:0e:64:4b:9f:7e:0a:aa:45:
d0:43:fb:60:10:f6:0a:a2:bf:b5:f5:62:c7:ca:9d:
d2:21:e9:9a:54:e6:25:c9:6d:9b:aa:3a:2b:bb:65:
3d:48:fb:9c:3e:d1:43:3f:3f:3d:d1:41:3f:79:8d:
38:88:41:b9:f6:60:85:a1:dd:11:aa:04:5c:e2:44:
6c:f8:a6:74:36:ad:aa:dd:10:57:5f:a7:8c:18:38:
ce:21:ce:35:7f:47:c9:de:66:f1:bf:d1:c2:87:8c:
00:24:23:a6:fb:f5:0b:46:1e:a0:0f:06:36:13:ed:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:68:5E:47:3B:96:74:BC:11:0C:05:C9:A7:A1:F1:1B:D9:51:84
X509v3 Authority Key Identifier:
keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/urBoXkc7lnS8EQwFyaeh8RvZUYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.135.0/24
Signature Algorithm: sha256WithRSAEncryption
57:12:c4:cc:b0:e7:6b:20:2d:ea:8a:ce:59:df:c9:a3:29:a3:
a5:fc:de:9b:a2:b0:94:a1:b0:47:98:45:36:55:38:62:62:69:
ea:07:34:b6:00:21:e1:85:9e:6d:0d:44:15:d0:bc:55:55:f3:
a6:82:a7:60:cd:02:f3:49:d7:c3:7a:8f:d1:fc:01:d3:fb:dd:
40:a6:87:59:75:cc:44:b0:a7:56:25:42:f8:4d:0f:b0:76:5d:
00:c3:a5:78:f8:cb:47:17:f2:e0:2f:2d:95:37:88:74:83:bf:
19:85:3a:23:8e:63:30:4f:3d:1f:6f:86:41:8b:3d:aa:6b:f3:
c7:e2:76:0e:0e:9a:0b:5b:b9:95:3e:94:91:cc:1e:13:f9:08:
b4:8a:f7:b0:1c:7a:12:6f:de:5e:43:5b:09:00:d0:ca:03:35:
0f:5a:b6:16:c8:60:a9:64:76:5a:94:3a:1b:fd:cc:a7:7a:70:
49:c6:52:f5:91:1a:ef:0c:79:46:51:8e:bd:1e:4a:8c:d2:be:
8c:9d:57:aa:df:b0:e3:24:0f:d3:ff:e5:1e:f8:4a:5b:7d:f4:
4c:73:7c:2b:66:31:5f:60:ee:af:66:f7:4f:42:78:80:93:ac:
ad:73:0b:88:93:01:0f:76:b6:0a:ee:7b:f1:37:d5:30:9d:80:
97:e7:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:12:14 2025 by rpki-client